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A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE MONTH(S) FROM 

THE MAILING DATE OF THIS COMMUNICATION. 
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closed in accordance with the practice under Ex parte Quayle, 1935 CD. 1 1 , 453 O.G. 213. 
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/)□ Claim{s) is/are objected to. 
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2.n Certified copies of the priority documents have been received in Application No. . 



3.n Copies of the certified copies of the priority documents have been received in this National Stage 
application from the International Bureau (PCT Rule 17.2(a)). 
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DETAILED ACTION 

1. Claims 1-37 has been re-examined and this office action is a Non-Final 
rejection. 

2. Claims 1-37 remains rejected under 35 U.S.C. 102(e). 



Claim Rejections - 35 USC S 102 

The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form 
the basis for the rejections under this section made in this Office action: 
A person shall be entitled to a patent unless - 

(e) the invention was described in a patent granted on an application for patent by another 
filed in the United States before the invention thereof by the applicant for patent, or on an 
international application by another who has fulfilled the requirements of paragraphs (1), 
(2), and (4) of section 371(c) of this title before the invention thereof by the applicant for 
patent. 

The changes made to 35 U.S.C. 102(e) by the American Inventors Protection Act 
of 1999 (AIPA) and the Intellectual Property and High Technology Technical 
Amendments Act of 2002 do not apply when the reference is a U.S. patent resulting 
directiy or indirectly from an international application filed before November 29, 2000. 
Therefore, the prior art date of the reference is determined under 35 U.S.C. 102(e) 
prior to the amendment by the AIPA (pre-AIPA 35 U.S.C. 102(e)). 
3. Claims 1-16 are rejected under 35 U.S.C. 102(e) as being 
anticipated by Garg, BtAl. (US 6,625,603). 
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As per claim 1: 

Garg discloses a storage system comprising: 

a first storage area having an object stored therein; and [see FIG.3A] 

a second storage area having stored therein an object identifier that 

identifies the object, v^herein the object identifier is unique within and outside 

of the storage system, [see coL6, line 66 - coL7, line 5] 

As per claim 2: 

Garg discloses the object identifier is a Universal Unique Identifier (UUID). 
[see col.8, lines 1-13] 

As per claim 3: 

Garg discloses the first and second storage areas are storage areas within a 
database, [see FIG.3A and coL5, lines 20-34] 

As per claim 4: Garg discloses the object identifier is a Universal Unique 
Identifier (UUID). [see coL8, lines 1-13] 
As per claim 5: 

Garg discloses the storage system is part of an access control system, 
[see col.6, line 60 - coL7y line 46] 
As per claim 6: 

Garg discloses a memory comprising: 

a first storage area having an object stored therein; and [see FIG.3A] 
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a second storage area having stored therein an object identifier that 
identifies the object, wherein the object identifier is unique within and outside 
of the storage system, [see coL6, line 66 - col.7, line 5] 

As per claim 7: Garg discloses the object identifier is a Universal Unique 
Identifier (UUID). [see coL8, lines 1-13] 

As per claim 8: Garg discloses the first and second storage areas are storage 
areas within a database, [see FIG.3A and coL5, lines 20-34] 

As per claim 9: Garg discloses the object identifier is a Universal Unique 
Identifier (UUID). [see coL8, lines 1-13] 
As per claim 10: 

Garg discloses a method of storing information in a storage system, 
comprising: 

storing an object in the storage system; and [see FIG.3A] 

storing an object identifier in the storage system, wherein the object identifier 
identifies the object, and the object identifier is unique within and outside of 
the storage system, [see coL6, line 66 - coL7, line 5] 

As per claim 11: as rejected on the same rationale as applied in claim 2. 
As per claim 12: 

Garg teaches the object identifier is stored in a database, [see FIG.2 and coL6, 
line 66 - col.7, line 5] 

As per claim 13: as rejected on the same rationale as applied in claim 12. 
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As per claim 14: Garg discloses the object identifier is a Universal Unique 
Identifier (UUID). [see coL8, Unes 1-13] 

As per claim 15: Garg discloses the object identifier is a Universal Unique 
Identifier (UUID). [see coL8, lines 1-13] 

As per claim 16: Garg discloses the storage system is part of an access 
control system, [see col.6, line 60 - coL7, line 46] 
As per claim 17: 

Garg discloses an access control method comprising: 

requesting access for a user to a remote resource [see col.5 lines 48-50], 
wherein the request includes a subject identifier for use in making an access 
control decision [see col.7, lines 26-39], and wherein the subject identifier is 
unique within and outside of the remote resource and identifies the user, [see 
col. 15, lines 39-54] 
As per claim 18: 

Garg discloses the subject identifier is a Universal Unique Identifier (UUID). 
[see coL8y lines 1-13] 
As per claim 19: 

Garg discusses the request further includes a subject descriptor for use in the 
access control decision, [see coL8, lines 23-43] 
As per claim 20: 

Garg discusses the subject descriptor is a UUID for an organizational structure 
that includes the user. [coL9, lines 5-12] 
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As per claim 2 1 : 

Garg discusses the access control decision is made by a resource manager that 
protects the remote resource, and the request is sent over a communications 
path considered safe by the protecting resource manager and the user, 
[see coL7y lines 6-60] 
As per claim 22: 

Garg discloses a computer-readable medium having computer-executable code 
stored thereon comprising: 

requesting access for a user to a remote resource [see col.5, lines 48-50], 
wherein the request includes a subject identifier for use in making an access 
control decision [see coL7, lines 26-39], and wherein the subject identifier is 
unique within and outside of the remote resource and identifies the user, [see 
col. 15, lines 39-54] 

As per claim 23: as rejected on the same rationale as applied in claim 18. 
As per claim 24: 

Garg discloses a method of identifying a user requesting access to an object, 
comprising: 

establishing a secure communication path between a reference monitor 
protecting the object and a resource manager [see coL7, lines 6-60] having 
information describing the user, in response to a request by the user to access 
the object; [see coLS, lines 1-43] 
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sending a request for user information from the protecting reference 
monitor to the resource manager [see coL7, lines 26-39], the request including 
a subject descriptor for the user, wherein the subject identifier is a Universal 
Unique Identifier (UUID). [see col. 13, line 42 - col. 14, line 30] 
[see col.7 lines 30-35] 
As per claim 25: 

Garg discloses determining, based on the received user information, if the user 
has permission to access the request object, [see col.8 lines 45-53] 
As per claim 26: 

Garg discloses the user information includes information relating to an 
organization of which the user is member, [see col. 14 lines 50-54] 
As per claim 27: 

Garg discloses an information storage management system, comprising: 
a collection of stored objects; [see col.8, lines 11-14] 

an access control unit for determining if a requestor is authorized to 
access a protected object stored in the collection; [see coL7 lines 26-39] 

a resource manager connected to the access control unit and to a 
communication channel; [see FIG.3A] 

wherein the resource manager receives a user*s request for access to the 
protected object, the request including a globally unique identifier for the user 
requesting the access [see col.S, lines 44-50], and in response to the user's 
request the resource manager sends over the communications channel [see 
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coL4, lines 45 - coL6, line 25] to an external storage management system a 
request for information about the user [see col.7 lines 40-60], the request 
including the globally unique identifier; and [see coLlS, line 42 - coL14, line 
30] 

wherein the resource manager upon receiving a response including user 
information about the user passes the user information to the access control 
unit [see coL7 lines 6-60]; and based on the user information the access control 
unit determines whether to grant the subject access to the protected object, 
[see coL14, lines 13-30] 
As per claim 28: 

Garg discloses the globally unique identifier is a Universal Unique Identifier 
(UUID). [see coL8, lines 1-13] 

As per claim 29: 

Garg discloses the user information is organization information indicating 
whether the user is a member of an organization, [see coL14 lines 50-54] 
As per claim 30: 

Garg discloses an information storage management system, comprising: 
a collection of stored objects; [see coL8, lines 11-14] 

an access control unit for determining if a requestor is authorized to 
access a protected object stored in the collection; [see col.7 lines 26-39] 

a resource manager connected to the access control unit and to a 
communication channel; [see col.7, lines 6-60 and FIG.3A] 
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wherein the resource manager receives a user's request for access to the 
protected object, the request including a globally unique identifier for the user 
requesting the access [see coL8, lines 1-13], and in response to the user's 
request the resource manager resolves the globally unique identifier to a user 
identifier recognized by an external storage management system [see coL7 lines 
40-60]; the resource manager sending to the external storage management 
system a request for information about the user, the request including the 
resolved user identifier; and [see coLQ, lines 10 thru coLll, line 66] 

wherein the resource manager upon receiving a response including user 
information about the user passes the user information to the access control 
unit [see coL7, lines 6-60]; and based on the user information the access 
control unit determines whether to grant the subject access to the protected 
object, [see coLlS, lines 39-54] 
As per claim 3 1 : 

Garg discloses the globally unique identifier is a Universal Unique Identifier 
(UUID). [see col.8, lines 1-13] 

As per claim 32: 

Garg discloses the user information is organization information indicating 
whether the user is a member of an organization, [see coL14 lines 50-54] 
As per claim 33: 

Garg discloses the resource manager resolves the globally unique identifier by 
using a name server, [see coL6y lines 46-53] 
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As per claim 34: 

Garg discloses a method of accessing a protected object, comprising: 

sending a globally unique identifier for a user to a name resolving device, 

and receiving therefrom information about the user; and [see coLlS, lines 3-67] 
sending to a storage management system containing an object a request 

for access to the object, the request including the information about the user. 

[see col.7 lines 26-39 and 001.14, lines 1-15] 

As per claim 35: as rejected on the same rationale as applied in claim 31. 
As per claim 36: 

Garg discloses a computer-readable medium of computer-executable code for 
accessing a protected object, comprising: 

a first set of computer instructions for sending a globally unique 
identifier for a user to a name resolving device, and receiving therefrom 
information about the user; and [see ooLlS, lines 1-53] 

a second set of computer instructions for sending to a storage 
management system containing an object a request for access to the object [see 
ooLT lines 26-39], the request including the information about the user, [see 
ooL13, line 12 - ooL14, line 30] 

As per claim 37: as rejected on the same rationale as applied in claim 31. 

**For more information and a better understanding of the rejection 
above, please refer to Garg, Et At on col.2...Et SEQ. 
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EXAMINER^S ARGUMENT 



Claims 1-37 have been re-examined and the Examiner has applied new 
grounds of rejection with new prior art. 

Garg, Et Al. disclose an object (col.8, lines 1-13) and an object identifier 
(col. 11, lines 38-40) wherein is a Globally Unique Identifier (QUID) or also can 
be referred as Universal Unique Identifier (UUID). Needless to say but for 
purposes of applying art, QUID is known in the art to be unique internally and 
externally of the storage system, thus it is inherent the GUIDs are unique 
where ever it is being used. It is also inherent GUIDs tells a lot about the user 
such as the GUID of that particular user has certain access control rights 
and /or information pertaining to where the user came from, whether the user 
is from a secure or unsecured location/ system. 
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Conclusion 



Any inquiry concerning this communication or earlier communications 
from the examiner should be directed to LEYNNA T. HA whose telephone 
number is (703) 305-3853. The examiner can normally be reached on Monday 
- Thursday (7:00 - 5:00PM). 

If attempts to reach the examiner by telephone are unsuccessful, the 
examiner's supervisor, Kim Vu can be reached on (703) 305-4393. The fax 
phone number for the organization where this application or proceeding is 
assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from 
the Patent Application Information Retrieval (PAIR) system. Status information 
for published applications may be obtained from either Private PAIR or Public 
PAIR. Status information for unpublished applications is available through 
Private PAIR only. For more information about the PAIR system, see 
http://pair-direct.uspto.gov. Should you have questions on access to the 
Private PAIR system, contact the Electronic Business Center (EBC) at 866-217- 
9197 (toll-free). 
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